Privacy policy statement

Personal information is any information or an opinion about an identifiable individual. The person's identity must be apparent or reasonably ascertainable from the information or opinion concerned. Personal information is collected from a variety of means including from written application forms, online application forms, letters or other correspondence, email messages, telephone or face-to-face contact.

Unique identifiers

A unique identifier is an identifier (usually a number) that is used for the primary purpose of identifying an individual.

The VGCCC only assigns unique identifiers (or adopts, uses or discloses a unique identifier assigned by another organisation) where it is necessary, authorized by law or with the consent of the individual.  

Anonymity

Where lawful and practicable, individuals should have the option of transacting or interacting with the VGCCC without identifying themselves.

Many of the things we do require you to provide us with your personal information (e.g. Collecting your name, address, telephone and email contact details in order to process licence applications). However, where it does not affect the proper performance of our functions, we will not require you to provide it (e.g. If you make a general telephone or email enquiry, we may be able to help you over the telephone or by email without the need for you to give us any of your personal details).

Sensitive information is a special category of personal information. It is defined as information or an opinion about certain sensitive aspects relating to individuals such as:

• criminal record
• racial or ethnic origin
• political opinions or membership of political association
• religious or philosophical beliefs or affiliations
• membership of professional or trade associations or unions
• sexual preferences or practices.

Health information is personal information or an opinion about:

• the physical, mental or psychological health of an individual
• a disability (at any time) of an individual
• an individual's expressed wishes about the future provision of health services to him or her
• a health service provided or to be provided to an individual.

We will use or disclose the personal information we collect only for:

• the purpose for which it was collected

• for a related purpose that an individual would expect their personal information to be used for in the circumstances
• with the consent of the individual concerned, for some other agreed purpose
• for law enforcement purposes
• as otherwise required or authorised by law.

Licence applicants

Under gambling legislation, we collect personal information about:

• applicants for various licences, permits or other authorisations
• associates of such applicants
• associates of already approved licensees, permit holders or other authorised participants.

The personal information collected from or about these individuals is used or disclosed to help us (where applicable):

• advise individuals and related entities of regulatory requirements and changes
• evaluate applications for various licences and permits or authorisations issued and administered by them pursuant to gambling legislation, including assessing the suitability of an applicant and, where required, an associate to be involved in, or licensed to work in, the gambling industry
• investigate possible contravention of gambling legislation and for ongoing monitoring purposes
• where applicable, assist the Commission to enforce and, where necessary, prosecute individuals for contravention of gambling legislation.

Employees

We collect and hold personal information about individuals who are currently engaged, have been engaged or are seeking to be engaged by the regulator for a specific position or purpose. This includes job applicants, employees, tenderers and contractors. Some health information is collected from time to time about employees for employment related purposes, for example, WorkCover.

The personal information collected from individuals is used to evaluate their capability and/or capacity to meet our requirements and/or contractual obligations and to manage any ongoing relationship with those individuals. In the case of employees, it is also collected for insurance-related purposes and computer network security purposes.

Generally, we collect personal information or health information directly from the individual. Personal or health information may be collected from third parties, such as corporate applicants with some connection to or association with the individual, or treating doctors.

Personal information may be obtained on an unsolicited basis either directly from individuals about themselves, or from third parties about individuals. This can include letters of complaint.

We take reasonable steps to ensure the individual knows why we collect it, what is done with it and to whom it is disclosed. Where we do not actively collect personal information directly from the individual, but acquires it from a third person, we will take reasonable steps to let the individual know it has that information if it is to be used or acted upon.

We may be required to collect some sensitive personal information. One example is a Victoria Police check as part of the probity processes to process licence or permit applications. We always obtain the consent of the individual concerned before requesting a police check, unless required under investigation or enforcement action.

Transborder data flows

If an individual’s personal information travels outside Victoria, the privacy protection should travel with it. We will only transfer personal information outside Victoria in the circumstances permitted by privacy legislation, for example, if the individual consents, or if the recipient of the personal information is subject to a law or binding scheme that is substantially similar to the Victorian privacy protections.

We take reasonable steps to ensure personal and health information it collects is accurate, complete and up-to-date. We hold personal information or health information in both electronic and paper-based forms. We have various security measures and processes in place to protect the information from misuse and loss, and from unauthorised access, modification or disclosure. Processes include:

• security computer access levels to ensure only authorised staff have access to certain kinds of computer-stored information

• use of computer passwords to ensure only authorised personnel have access to computer files

• use of virus protection software

• storage of paper-based documents containing personal information in locked cabinets or rooms or other secured areas accessible only by authorised personnel

• providing physical security to limit access to our offices to authorised personnel only. 

You may request a copy of your personal information and request to correct that information, if found to be inaccurate. It is our policy that you should be able to request access to your personal information directly, without the need to make a formal application under the Freedom of Information Act 1982.

However, there are situations where it will not be appropriate to provide direct access to information, and you will be required to make a freedom of information application. For example, where providing direct access would compromise the privacy of another person. A fee may apply for such an application.

If you are an existing or former employee of the VGCCC or its predecessors, you may access information relating to your employment by written request without making a formal request under the Act.

Read more about how to make freedom of information application.

Please email [email protected] if you have:

• a query about our policies about handling personal information (including any sensitive information or health information)
• a complaint about how we handle your personal information.

If your complaint is not resolved to your satisfaction, or within a reasonable time, you may seek review of the matter by writing to the Chief Executive Officer at [email protected]

Under the Privacy and Data Protection Act 2014 a person may complain to the Office of the Victorian Information Commissioner (OVIC) about an act or practice that may be an interference with their privacy in relation to personal information.

Note the Commissioner may decline to consider a complaint if you have not complained to us first. 

If your complaint relates to health information held by us, and you feel we have not adequately dealt with your complaint through our internal complaints procedures, you may seek to contact the Health Complaints Commissioner.